473,320 Members | 2,048 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,320 software developers and data experts.

mod_php not secure?

Hi all,

I noticed that with Slackware they don't include
mod_php in the latest distro. I also noticed some
talk on the web that there was an insecurity
issue with mod_php in a previous version of
Slackware.

So is this just a Slackware mishap or is there
a good reason to no longer permit PHP from
Apache?

Thanks for any (nonpartisan) info-

Jul 17 '05 #1
6 2214
On 26 Jun 2005 06:03:22 -0700, ya********@yahoo.com wrote:
I noticed that with Slackware they don't include
mod_php in the latest distro.
ftp://ftp.slackware.com/pub/slackwar...t/slackware/n/
http://www.slackware.com/pb/showdesc...-4.3.11-i486-1
http://download.mirror.ac.uk/sites/f....10-i486-1.txt

Looks included to me?
I also noticed some
talk on the web that there was an insecurity
issue with mod_php in a previous version of
Slackware.


This one?

http://www.slackware.com/security/vi...ecurity.437272

That was upgrading to the latest version of PHP due to a security issue found
in there. AFAIK it's safe again now.

--
Andy Hassall / <an**@andyh.co.uk> / <http://www.andyh.co.uk>
<http://www.andyhsoftware.co.uk/space> Space: disk usage analysis tool
Jul 17 '05 #2
>Looks included to me?

No... look in the tarball. There are no files such as
mod_php*.so.

It's missing.

Jul 17 '05 #3
*** ya********@yahoo.com wrote/escribió (26 Jun 2005 17:02:31 -0700):
No... look in the tarball. There are no files such as
mod_php*.so.

It's missing.


I'm running PHP as Apache 2 module in Red Hat 9 and there's no such file as
mod_php.so or the like. Are you sure the regular php package doesn't
include all you need?
--
-- Álvaro G. Vicario - Burgos, Spain
-- http://bits.demogracia.com - Mi sitio sobre programación web
-- Don't e-mail me your questions, post them to the group
--
Jul 17 '05 #4


Alvaro G Vicario wrote:
I'm running PHP as Apache 2 module in Red Hat 9 and there's no such file as
mod_php.so or the like. Are you sure the regular php package doesn't
include all you need?


No, but in the documentation it says I need to use
a file in /usr/libexec/apache called mod_php.so or something.
The only php-related file in that directory is libphp4.so,
which I tried specifying but it doesn't work.

It would be easier for me to write my own simple
web server than deal with this hassle.

Incidentally:

Could it be that Apache is so popular because the people
using it are not programmers?

Jul 17 '05 #5
*** ya********@yahoo.com wrote/escribió (27 Jun 2005 03:50:44 -0700):
No, but in the documentation it says I need to use
a file in /usr/libexec/apache called mod_php.so or something.
The only php-related file in that directory is libphp4.so,
which I tried specifying but it doesn't work.

It would be easier for me to write my own simple
web server than deal with this hassle.


That's the reason why I never recompile anything. Binary packages work out
of the box and I love that :)
--
-- Álvaro G. Vicario - Burgos, Spain
-- http://bits.demogracia.com - Mi sitio sobre programación web
-- Don't e-mail me your questions, post them to the group
--
Jul 17 '05 #6
On 27 Jun 2005 03:50:44 -0700, ya********@yahoo.com wrote:
Alvaro G Vicario wrote:
I'm running PHP as Apache 2 module in Red Hat 9 and there's no such file as
mod_php.so or the like. Are you sure the regular php package doesn't
include all you need?
No, but in the documentation it says I need to use
a file in /usr/libexec/apache called mod_php.so or something.


Which documentation?

http://www.google.com/search?q=mod_p...w.php.net&l=en

There are some hits on Google for "mod_php.so" but several refer to PHP3. Is
perhaps mod_php an alternate name used on some distros to fit in with naming
conventions? Doesn't seem to be the default, at least not nowadays.
The only php-related file in that directory is libphp4.so,
That is the Apache loadable module for PHP. There's no mod_php.so on my system
either.
which I tried specifying but it doesn't work.


Doesn't it?

--
Andy Hassall / <an**@andyh.co.uk> / <http://www.andyh.co.uk>
<http://www.andyhsoftware.co.uk/space> Space: disk usage analysis tool
Jul 17 '05 #7

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

5
by: zaphod | last post by:
I've recently considered switching from mod_perl to mod_php because mod_perl, unless configured with multiple servers/ports/IP addresses, serves static HTML from mod_perl processes, which is...
40
by: Shufen | last post by:
Hi all, Can someone who has use PHP before and know quite well about the language, tell me what are the stuffs that Python offers and PHP doesn't. A few examples will be nice. I know about the...
3
by: emilper | last post by:
Hi, while using mod_php in apache: If I am including one .inc file in one page, does it get compiled and kept in memory so when I include the same file in another page on the same server, the...
5
by: howachen | last post by:
hi, which package you perfer? mod_php on apache is okay but some people said fastcgi version of php is faster, is it true? thanks...
7
by: Vincent Delporte | last post by:
Hello I'm interested in hearing reflections by seasoned web app developpers about the different ways to write PHP apps, and especially how they compare in terms of performance, whether it's the...
0
by: R.A.M. | last post by:
Hello, I am using Fedora 7 Moonshine Linux with Apache installed. I have installed PHP5 using command: yum install php. Then I configured httpd adding module mod_php.so to httpd.conf (and other...
2
by: Evil Son | last post by:
Hello group, If I switched from mod_php to fast-cgi, would I need to make any changes to my php source? Also, will something like APC still be useful? Will my database connections suddenly...
4
by: setesting001 | last post by:
How many of you are running Fast CGI instead of the popular mod_php? I planning to change to fast cgi since my applications need around 15MB memory to handle a single request, so consider if...
7
by: yawnmoth | last post by:
Correct me if I'm wrong, but isn't running PHP via mod_php faster than running it via CGI? If so, why would a web hosting company be running PHP via CGI and not mod_php? I asked that very...
0
by: DolphinDB | last post by:
The formulas of 101 quantitative trading alphas used by WorldQuant were presented in the paper 101 Formulaic Alphas. However, some formulas are complex, leading to challenges in calculation. Take...
0
by: DolphinDB | last post by:
Tired of spending countless mintues downsampling your data? Look no further! In this article, you’ll learn how to efficiently downsample 6.48 billion high-frequency records to 61 million...
1
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: Vimpel783 | last post by:
Hello! Guys, I found this code on the Internet, but I need to modify it a little. It works well, the problem is this: Data is sent from only one cell, in this case B5, but it is necessary that data...
0
by: jfyes | last post by:
As a hardware engineer, after seeing that CEIWEI recently released a new tool for Modbus RTU Over TCP/UDP filtering and monitoring, I actively went to its official website to take a look. It turned...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
0
by: Defcon1945 | last post by:
I'm trying to learn Python using Pycharm but import shutil doesn't work
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.